This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer File: VZcyBKNpaAWG3if5RvyBZlYyqoM.cer (raw, json) Hash identifier: 1WZwp2JXex7Va33JUZ1M03IDhBDU4GqXnjlZYcbbVdE= Subject key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8304CCEFC44DC4179451A1C39A4A19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56711 IP: 31.193.248.0/21 IP: 2a04:60c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:04:cc:ef:c4:4d:c4:17:94:51:a1:c3:9a:4a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55973204a369680586de27f946fc81665632aa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4d:4e:3b:86:9b:ed:ac:e7:ec:65:9e:f3:01: 4e:e5:90:0b:70:79:ac:34:dd:a2:0d:ff:6a:76:de: dc:a5:6f:2a:dd:c6:f4:f3:e7:85:23:70:ab:87:e9: 1c:60:50:7a:98:e0:c2:33:33:99:9b:3a:7d:9c:ac: 0e:61:bd:38:8e:d8:f1:28:73:86:02:60:ec:8d:20: a0:ea:76:65:52:dd:53:85:80:9e:71:85:e2:e9:32: 59:4f:4a:91:08:1f:50:d9:53:6d:e3:4c:e9:42:98: af:3b:dc:7b:c6:aa:d7:23:e9:78:af:e1:fe:6e:03: a6:1f:f9:17:73:33:bb:dd:06:2c:50:4d:b9:b6:a5: ef:96:d5:d6:81:b3:35:9b:0d:77:10:b8:df:8a:ad: 10:9e:99:e5:86:d7:e6:43:1b:fe:06:fc:ba:9a:2e: 8c:77:c0:af:f0:16:ac:9f:af:91:ea:73:cb:55:9d: ff:d6:52:ad:78:e3:dd:52:2a:2f:62:1a:4b:bd:10: 4c:88:85:64:57:3b:e3:8f:8b:66:68:15:4e:d7:8e: 70:fb:59:77:e9:5e:c7:96:45:e8:44:91:be:90:9d: 46:44:4d:99:c1:26:f1:2d:79:04:a0:ae:65:fe:bd: 9d:45:4f:96:4f:e2:29:ce:50:3c:7d:0b:78:05:90: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.248.0/21 IPv6: 2a04:60c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56711 Signature Algorithm: sha256WithRSAEncryption 3a:38:58:93:e3:81:a9:ca:2f:f1:8a:c4:93:ca:b0:b8:33:51: 15:12:80:97:1c:42:bb:2c:48:2f:be:d4:55:6a:d7:48:c8:42: 00:f9:f7:e4:e4:74:ee:fb:ab:aa:a2:6c:7a:63:f6:da:de:38: e6:6d:ad:58:e7:3b:e9:2b:f0:3f:e5:c5:0b:d6:07:b1:b8:67: d4:a1:43:83:f9:46:b6:19:e7:49:da:ee:8b:f7:2c:48:68:77: ff:9c:f5:fe:c7:95:3d:50:11:76:bd:6a:58:2e:b4:75:a1:eb: a8:a1:2c:14:09:40:2a:d5:ac:0b:c3:62:be:1e:80:a6:90:f7: 69:c3:e2:31:91:b9:75:b0:90:83:47:30:83:ce:af:2a:08:9c: eb:06:4d:39:37:5d:45:41:fb:3b:77:85:a5:2b:88:55:94:33: f5:b7:24:7b:d4:94:2a:95:9a:a9:3d:ae:a4:20:f2:68:9b:d2: 4b:6d:8c:54:49:f9:ab:78:65:03:b3:40:b9:cb:3e:c0:05:80: 4b:d3:ad:78:a8:05:e2:e6:45:41:b0:9b:c2:4b:0d:6b:03:72: bd:0c:8d:75:b4:32:b0:1f:b1:c3:f8:bc:b0:2c:3a:7c:39:b7: cb:d3:82:ff:a5:75:5f:6a:20:54:34:4d:a3:48:12:46:6a:fd: ca:16:37:ef -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gwTM78RNxBeUUaHDmkoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTk3MzIwNGEzNjk2ODA1ODZkZTI3Zjk0NmZjODE2NjU2MzJhYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E1OO4ab7azn7GWe8wFO5ZALcHms NN2iDf9qdt7cpW8q3cb08+eFI3Crh+kcYFB6mODCMzOZmzp9nKwOYb04jtjxKHOG AmDsjSCg6nZlUt1ThYCecYXi6TJZT0qRCB9Q2VNt40zpQpivO9x7xqrXI+l4r+H+ bgOmH/kXczO73QYsUE25tqXvltXWgbM1mw13ELjfiq0QnpnlhtfmQxv+Bvy6mi6M d8Cv8Basn6+R6nPLVZ3/1lKteOPdUiovYhpLvRBMiIVkVzvjj4tmaBVO145w+1l3 6V7HlkXoRJG+kJ1GRE2ZwSbxLXkEoK5l/r2dRU+WT+IpzlA8fQt4BZARhQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFWXMgSjaWgFht4n+Ub8gWZWMqqDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2IzNzIx Ni0zZWE2LTRmOTAtOTgzYi0wOWM4MTQ4YmQyM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYjM3MjE2 LTNlYTYtNGY5MC05ODNiLTA5YzgxNDhiZDIzZi8xL1ZaY3lCS05wYUFXRzNpZjVS dnlCWmxZeXFvTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDH8H4MA0EAgACMAcDBQMqBGDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDdhzANBgkqhkiG9w0BAQsFAAOCAQEAOjhYk+OBqcov 8YrEk8qwuDNRFRKAlxxCuyxIL77UVWrXSMhCAPn35OR07vurqqJsemP22t445m2t WOc76SvwP+XFC9YHsbhn1KFDg/lGthnnSdrui/csSGh3/5z1/seVPVARdr1qWC60 daHrqKEsFAlAKtWsC8Nivh6AppD3acPiMZG5dbCQg0cwg86vKgic6wZNOTddRUH7 O3eFpSuIVZQz9bcke9SUKpWaqT2upCDyaJvSS22MVEn5q3hlA7NAucs+wAWAS9Ot eKgF4uZFQbCbwksNawNyvQyNdbQysB+xw/i8sCw6fDm3y9OC/6V1X2ogVDRNo0gS Rmr9yhY37w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:37 2026 by rpki-client